This part I have added recently, but as I recall it wasn't parallel to this bug(?).
[code]
#anti-slowloris
client_body_timeout 10;
client_header_timeout 10;
keepalive_timeout 10;
keepalive_requests 250;
send_timeout 10;
limit_zone limit_per_ip $binary_remote_addr 1m;
#end slowloris

#cache for performance?
open_file_cache max=1000 inactive=20s;
open_file_cache_valid 30s;
open_file_cache_min_uses 2;
open_file_cache_errors on;
#end cache


[/code]